San Francisco • Paris • Düsseldorf • Soest • London

MCSE:
Windows

®

2000
Directory Services Administration
Study Guide

Anil Desai
with James Chellis
Copyright ©2000 SYBEX , Inc., Alameda, CA
www.sybex.com

Associate Publisher: Neil Edde
Contracts and Licensing Manager: Kristine O’Callaghan
Developmental Editors: Dann McDorman and Ben Tomkins
Editor: Julie Sakaue
Production Editor: Teresa Trego
Technical Editors: Michael Chacon and Donald Fuller
Book Designer: Bill Gibson
Graphic Illustrator: Tony Jonick

technically accurate content, based on sampling of text.
SYBEX is an independent entity from Microsoft Corporation, and not affiliated with Microsoft Corporation in any manner.
This publication may be used in assisting students to prepare for a Microsoft Certified Professional Exam. Neither Microsoft
Corporation, its designated review company, nor SYBEX warrants that use of this publication will ensure passing the rel-
evant exam. Microsoft is either a registered trademark or trademark of Microsoft Corporation in the United States and/or
other countries.
TRADEMARKS: SYBEX has attempted throughout this book to distinguish proprietary trademarks from descriptive terms
by following the capitalization style used by the manufacturer.
The author and publisher have made their best efforts to prepare this book, and the content is based upon final release soft-
ware whenever possible. Portions of the manuscript may be based upon pre-release versions supplied by software manu-
facturer(s). The author and the publisher make no representation or warranties of any kind with regard to the completeness
or accuracy of the contents herein and accept no liability of any kind including but not limited to performance, merchant-
ability, fitness for any particular purpose, or any losses or damages of any kind caused or alleged to be caused directly or
indirectly from this book.
Manufactured in the United States of America
10 9 8 7 6 5 4 3 2 1
www.sybex.com
Copyright ©2000 SYBEX , Inc., Alameda, CA

To Our Valued Readers:
In recent years, Microsoft’s MCSE program has established itself as the premier computer and net-
working industry certification. Nearly a quarter of a million IT professionals have attained MCSE sta-
tus in the NT 4 track. Sybex is proud to have helped thousands of MCSE candidates prepare for their
exams over these years, and we are excited about the opportunity to continue to provide people with
the skills they’ll need to succeed in the highly competitive IT industry.
For the Windows 2000 MCSE track, Microsoft has made it their mission to demand more of exam
candidates. Exam developers have gone to great lengths to raise the bar in order to prevent a paper-
certification syndrome, one in which individuals obtain a certification without a thorough under-
standing of the technology. Sybex welcomes this new philosophy as we have always advocated a com-
prehensive instructional approach to certification courseware. It has always been Sybex’s mission to

herein as to that particular Software component. Your purchase, acceptance, or use of the Software will constitute your accep-
tance of such End-User Licenses.
By purchase, use or acceptance of the Software you further agree to comply with all export laws and regulations of the United
States as such laws and regulations may exist from time to time.

Reusable Code in This Book

The authors created reusable code in this publication expressly for reuse for readers. Sybex grants readers permission to reuse
for any purpose the code found in this publication or its accompanying CD-ROM so long as all three authors are attributed in
any application containing the reusable code, and the code itself is never sold or commercially exploited as a stand-alone product.

Software Support

Components of the supplemental Software and any offers associated with them may be supported by the specific Owner(s) of
that material but they are not supported by SYBEX. Information regarding any available support may be obtained from the
Owner(s) using the information provided in the appropriate read.me files or listed elsewhere on the media.
Should the manufacturer(s) or other Owner(s) cease to offer support or decline to honor any offer, SYBEX bears no responsi-
bility. This notice concerning support for the Software is provided for your information only. SYBEX is not the agent or prin-
cipal of the Owner(s), and SYBEX is in no way responsible for providing any support for the Software, nor is it liable or
responsible for any support provided, or not provided, by the Owner(s).

Warranty

SYBEX warrants the enclosed media to be free of physical defects for a period of ninety (90) days after purchase. The Software
is not available from SYBEX in any other form or media than that enclosed herein or posted to

www.sybex.com

. If you discover
a defect in the media during this warranty period, you may obtain a replacement of identical format at no charge by sending

This Software may contain various programs that are distributed as shareware. Copyright laws apply to both shareware and
ordinary commercial software, and the copyright Owner(s) retains all rights. If you try a shareware program and continue using
it, you are expected to register it. Individual programs differ on details of trial periods, registration, and payment. Please observe
the requirements stated in appropriate files.

Copy Protection

The Software in whole or in part may or may not be copy-protected or encrypted. However, in all cases, reselling or redistrib-
uting these files without authorization is expressly forbidden except as specifically provided for by the Owner(s) therein.
www.sybex.com
Copyright ©2000 SYBEX , Inc., Alameda, CA

To Monica
www.sybex.com
Copyright ©2000 SYBEX , Inc., Alameda, CA

Acknowledgments

A

s professionals in the IT industry, many of you have probably
learned the value of teamwork. Therefore, it will probably come as no sur-
prise to you that this book is the result of a lot of hard work from several
people. In this brief section, I’ll try to give credit where it’s due.
During the last year, I’ve had the pleasure of working with many ener-
getic, enthusiastic, and driven people at QuickArrow, Inc. At first, I was
planning to acknowledge some of the people that I work with. But, it’s much
more appropriate to thank all of them. Just a few short months ago, I could
have easily listed the names of everyone in the company on this page. We
used to be a small team with big plans. Things have changed, and we’re now

pare to work with Windows 2000 in the real world. For most of you, I sus-
pect that it will be a challenge. However, I trust that it will be a personally
and professionally rewarding one.
If you have any questions or comments about the contents of the book,
please feel free to e-mail me at

[email protected]

. Good luck!
www.sybex.com
Copyright ©2000 SYBEX , Inc., Alameda, CA

Introduction

M

icrosoft’s new Microsoft Certified Systems Engineer (MCSE) track for
Windows 2000 is the premier certification for computer industry profession-
als. Covering the core technologies around which Microsoft’s future will be
built, the new MCSE certification is a powerful credential for career
advancement.
This book has been developed, in cooperation with Microsoft Corpora-
tion, to give you the critical skills and knowledge you need to prepare for one
of the core requirements of the new MCSE certification program, Imple-
menting and Administering Windows 2000 Directory Services. You will find
the information you need to acquire a solid understanding of how to setup
and manage the Active Directory, to prepare for Exam 70-217:

Implement-
ing and Administering a Microsoft Windows 2000 Directory Services

Copyright ©2000 SYBEX , Inc., Alameda, CA

xxiv

Introduction

Windows 2000 actually consists of several different versions:

Windows 2000 Professional

The client edition of Windows 2000,
which is comparable to Windows NT 4 Workstation, but also includes
the best features of Windows 98 and many new features.

Windows 2000 Server/Windows 2000 Advanced Server

A server edi-
tion of Windows 2000 for small to mid-sized deployments. Advanced
Server supports more memory and processors than Server does.

Windows 2000 Datacenter Server

A server edition of Windows 2000
for large, wide-scale deployments and computer clusters. Datacenter
Server supports the most memory and processors of the three versions.
With such an expansive operating system, companies need to be certain
that you are the right person for the job being offered. The MCSE is designed
to help prove that you are.

As part of its promotion of Windows 2000, Microsoft has announced that

xxv

What Does This Book Cover?

This book contains detailed explanations, hands-on exercises, and review
questions to test your knowledge.
Think of this book as your complete guide to implementing and admin-
istering Windows 2000 Directory Services. It begins by presenting an over-
view of the Active Directory. Next, you will learn how to perform important
tasks, including:


Creating a Windows 2000 Active Directory domain


Installing and configuring objects within the Active Directory


Monitoring and managing various aspects of the Active Directory


Managing new features of the Active Directory, including security
configuration, the use of Group Policies, DNS, and software deploy-
ment


Working with the Active Directory in distributed network environ-
ments



or software products. For the new MCSE exams, this simply will not be the
case.
To avoid the “paper-MCSE syndrome” (a devaluation of the MCSE cer-
tification because unqualified individuals manage to pass the exams),
Microsoft has taken strong steps to protect the security and integrity of the
new MCSE track. Prospective MSCEs will need to complete a course of
study that provides not only detailed knowledge of a wide range of topics,
but true skills derived from working with Windows 2000 and related soft-
ware products.
In the new MCSE program, Microsoft is heavily emphasizing hands-on
skills. Microsoft has stated that, “Nearly half of the core required exams’
content demands that the candidate have troubleshooting skills acquired
through hands-on experience and working knowledge.”
Fortunately, if you are willing to dedicate time and effort with Windows
2000, you can prepare for the exams by using the proper tools. If you work
through this book and the other books in this series, you should successfully
meet the exam requirements.
This book is a part of a complete series of Sybex MCSE Study Guides,
published by Sybex, that covers the five core Windows 2000 requirements as
well as the new Design electives you need to complete your MCSE track.
Titles include:


MCSE: Windows 2000 Professional Study Guide


MCSE: Windows 2000 Server Study Guide


MCSE: Windows 2000 Network Infrastructure Administration Study

067, 70-068, and 70-073) may opt to take an “accelerated” exam plus
one core design exam and two electives.

If you do not pass the accelerated exam after one attempt, you must pass the

five core requirements and two electives.

The following table shows the exams a new certification candidate must pass.

All

of these exams are required

Exam # Title Requirement Met

70-216 Implementing and Administering
a Microsoft® Windows® 2000
Network Infrastructure
Core (Operating System)
70-210 Installing, Configuring, and
Administering Microsoft®
Windows® 2000 Professional
Core (Operating System)
70-215 Installing, Configuring, and
Administering Microsoft®
Windows® 2000 Server
Core (Operating System)
70-217 Implementing and Administering
a Microsoft® Windows® 2000
Directory Services Infrastructure


Exam # Title Requirement Met

70-219 Designing a Microsoft®
Windows® 2000 Directory
Services Infrastructure
Elective
70-220 Designing Security for a
Microsoft® Windows® 2000
Network
Elective
70-221 Designing a Microsoft®
Windows® 2000 Network
Infrastructure
Elective
Any
current
MCSE
elective
Exams cover topics such as
Exchange Server, SQL Server,
Systems Management Server,
Internet Explorer Administrators
Kit, and Proxy Server (new exams
are added regularly)
Elective
www.sybex.com
Copyright ©2000 SYBEX , Inc., Alameda, CA

Introduction


Configuring and managing features of the Active Directory


Monitoring and optimizing the Active Directory


Managing the Active Directory in distributed network environments


Managing Active Directory environments through the use of security
features, Group Policy settings, and software deployment tools


Troubleshooting problems with the Active Directory
This exam can be quite specific regarding setting up and administering
Windows 2000 Directory Services requirements and operational settings,
and it can be particular about how administrative tasks are performed in the
operating system. It also focuses on fundamental concepts that are related to
the way an Active Directory environment is implemented. Careful study of this
book, along with hands-on experience, will help you to prepare for this exam.
www.sybex.com
Copyright ©2000 SYBEX , Inc., Alameda, CA

xxx

Introduction

Microsoft provides exam objectives to give you a very general overview of
possible areas of coverage of the Microsoft exams. For your convenience, we


to an individual by using adaptive testing, and adding new exam elements.

Exam questions may be in multiple-choice, select-and-place, simulation,
or case study-based formats. You may also find yourself taking an adaptive
format exam. Let’s take a look at the exam question types and adaptive test-
ing, so you can be prepared for all of the possibilities.
www.sybex.com
Copyright ©2000 SYBEX , Inc., Alameda, CA

Introduction

xxxi

Multiple-Choice Questions

Multiple-choice questions include two main types of questions. One is a
straightforward type that presents a question, followed by several possible
answers, of which one or more is correct.
The other type of multiple-choice question is more complex. This type
presents a set of desired results along with a proposed solution. You must
then decide which results would be achieved by the proposed solution.

You will see many multiple-choice questions in this study guide and on the

accompanying CD, as well as on your exam.

Select-and-Place Questions

Select-and-place exam questions involve graphical elements that you must

faces look nearly identical to what you see in the actual product, as shown
in the example below.
Simulations are by far the most complex element introduced into
Microsoft exams to date. Because of the number of possible errors that can
www.sybex.com
Copyright ©2000 SYBEX , Inc., Alameda, CA

Introduction

xxxiii

be made on simulations, it is worthwhile to consider the following recom-
mendations from Microsoft:


Do not change any simulation settings that don’t pertain to the solu-
tion directly.


Assume that the default settings are used when related information
has not been provided.


Make sure that your entries are spelled correctly.


Close all of the simulation application windows after completing the
set of tasks in the simulation.
The best way to prepare for the simulation questions is to spend time
working with the graphical interface of the product on which you will be

www.sybex.com
Copyright ©2000 SYBEX , Inc., Alameda, CA

xxxiv

Introduction

The number of questions presented in your adaptive test will depend on
how long it takes the exam to ascertain your level of ability (according to the
statistical measurements on which the exam questions are ranked). To deter-
mine a test-taker’s level of ability, the exam presents questions in increasing
or decreasing order of difficulty.

Unlike the previous test format, the adaptive format will

not

allow you to go
back to see a question again. The exam only goes forward. Once you enter
your answer, that’s it—you cannot change it. Be very careful before entering your
answer. There is no time limit for each individual question (only for the exam
as a whole). Your exam may be shortened by correct answers (or lengthened

by incorrect answers), so there is no advantage to rushing through questions.

HOW ADAPTIVE EXAMS DETERMINE ABILITY LEVELS

As an example of how adaptive testing works, suppose that you know three
people who are taking the exam: Herman, Sally, and Rashad. Herman
doesn’t know much about the subject, Sally is moderately informed, and



It saves time by focusing only on the questions needed to determine a
test-taker’s abilities. An exam that might take an hour and a half in the
conventional format could be completed in less than half that time
when presented in adaptive format. The number of questions in an
adaptive exam may be far fewer than the number required by a con-
ventional exam.


It protects the integrity of the exams. By exposing a fewer number of
questions at any one time, it makes it more difficult for individuals to
collect the questions in the exam pools with the intent of facilitating
exam “cramming.”


It saves Microsoft and/or the test-delivery company money by reduc-
ing the amount of time it takes to deliver a test.

We recommend that you try the Edge Test Adaptive Exam, which is included

on the CD that accompanies this study guide.

Exam Question Development

Microsoft follows an exam-development process consisting of eight manda-
tory phases. The process takes an average of seven months and involves more
than 150 specific steps. The MCP exam development consists of the follow-
ing phases:


ten are based on the results of the blueprint survey.
Phase 5: Alpha Review and Item Revision During this phase, a panel of
technical and job-function experts reviews each item for technical accu-
racy, then answers each item, reaching a consensus on all technical issues.
Once the items have been verified as technically accurate, they are edited
to ensure that they are expressed in the clearest language possible.
Phase 6: Beta Exam The reviewed and edited items are collected into
beta exams. Based on the responses of all beta participants, Microsoft per-
forms a statistical analysis to verify the validity of the exam items and to
determine which items will be used in the certification exam. Once the
analysis has been completed, the items are distributed into multiple par-
allel forms, or versions, of the final certification exam.
Phase 7: Item Selection and Cut-Score Setting The results of the beta
exams are analyzed to determine which items should be included in the
certification exam based on many factors, including item difficulty and
relevance. During this phase, a panel of job-function experts determines
the cut score (minimum passing score) for the exams. The cut score dif-
fers from exam to exam because it is based on an item-by-item determi-
nation of the percentage of candidates who answered the item correctly
and who would be expected to answer the item correctly.
Phase 8: Live Exam As the final phase, the exams are given to candi-
dates. MCP exams are administered by Sylvan Prometric and Virtual Uni-
versity Enterprises (VUE).
www.sybex.com
Copyright ©2000 SYBEX , Inc., Alameda, CA
Introduction xxxvii
Microsoft will regularly add and remove questions from the exams. This is
called item seeding. It is part of the effort to make it more difficult for individuals
to merely memorize exam questions passed along by previous test-takers.
Tips for Taking the Implementing and Administering

You should determine the number of the exam you want to take, and then
register with the Sylvan Prometric or VUE registration center nearest to you.
At this point, you will be asked for advance payment for the exam. The
www.sybex.com
Copyright ©2000 SYBEX , Inc., Alameda, CA
xxxviii Introduction
exams are $100 each. Exams must be taken within one year of payment. You
can schedule exams up to six weeks in advance or as late as one working day
prior to the date of the exam. You can cancel or reschedule your exam if you
contact the center at least two working days prior to the exam. Same-day
registration is available in some locations, subject to space availability.
Where same-day registration is available, you must register a minimum of
two hours before test time.
You may also register for your exams online at www.sylvanprometric.com or
www.vue.com.
When you schedule the exam, you will be provided with instructions
regarding appointment and cancellation procedures, ID requirements, and
information about the testing center location. In addition, you will receive a
registration and payment confirmation letter from Sylvan Prometric or VUE.
Microsoft requires certification candidates to accept the terms of a Non-
Disclosure Agreement before taking certification exams.
What’s on the CD?
With this new book in our best-selling MCSE study guide series, we are
including quite an array of training resources. On the CD are numerous sim-
ulations, practice exams, and flashcards to help you study for the exam. Also
included are the entire contents of the study guide. These resources are
described in the following sections.
The Sybex Ebook for Implementing and Administering
Windows 2000 Directory Services
Many people like the convenience of being able to carry their whole study

Copyright ©2000 SYBEX , Inc., Alameda, CA